autotrace-0.31.1-CVE-2016-7392.patch 614 B

12345678910111213141516
  1. Patch from debian to fix CVE-2016-7392
  2. https://blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c/
  3. --- a/output-pstoedit.c
  4. +++ b/output-pstoedit.c
  5. @@ -84,7 +84,7 @@
  6. dd_tmp = dd_start;
  7. while (dd_tmp->symbolicname)
  8. dd_tmp++;
  9. - XMALLOC(pstoedit_suffix_table, sizeof(char *) * 2 * (dd_tmp - dd_start) + 1);
  10. + XMALLOC(pstoedit_suffix_table, sizeof(char *) * (2 * (dd_tmp - dd_start) + 1));
  11. #if defined (OUTPUT_PSTOEDIT_DEBUG) && defined(__GNUC__)
  12. fprintf(stderr, "OUTPUT PSTOEDIT BACKEND DEBUG(%s)\n", __FUNCTION__);